$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: mF32uLp3ow9IX4hmVoMH8YE6tgXZ8VAOSOxTzCUdp1w= Subject key identifier: A3:C0:B0:AE:E9:F2:F4:F7:29:92:86:E7:0C:37:05:FB:9C:49:3E:42 Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 0470 Signing time: Sat 23 Aug 2025 00:21:12 +0000 Manifest this update: Sat 23 Aug 2025 00:21:11 +0000 Manifest next update: Sat 30 Aug 2025 00:21:11 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: knL6iRJ0guH8NE8lknNQMuNhSoNltqHcjSe66lS7/CE=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: Aug 23 00:21:11 2025 GMT Not After : Aug 30 00:21:11 2025 GMT Subject: CN=68a90977-fa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:09:d6:ea:a5:97:60:05:cf:5e:00:35:e0: 8c:a8:cc:64:5d:ae:b7:67:da:03:43:d2:b0:0a:28: 00:aa:d9:aa:30:34:17:2b:32:66:5c:f6:5c:81:72: bf:f6:14:6d:36:51:93:81:ca:df:1c:af:01:91:b5: 79:76:9e:43:0b:a0:2a:a6:b7:29:c8:4b:ce:67:b8: f2:4a:64:21:52:63:da:7a:a3:2f:33:05:42:c6:43: 81:f5:c3:3c:cd:1c:c2:fa:fa:dc:6a:68:fd:d4:d8: c2:81:48:55:3b:a8:d2:0c:4c:60:28:34:10:bd:3d: 7c:df:50:90:30:5e:d4:79:16:a4:5d:35:45:c4:1f: bb:72:e7:95:d5:df:9a:ca:d6:38:74:ed:78:9b:fc: 16:d1:76:4e:d6:a9:10:7b:ae:20:e0:20:e9:08:d4: f4:90:e4:95:79:aa:60:9a:b8:66:09:88:8a:02:7b: f1:7d:0f:ec:54:d3:d3:79:08:21:31:f3:04:f9:02: b1:9e:d9:64:ce:5c:1e:e8:df:49:97:f7:76:90:33: dc:a8:f3:80:26:59:94:25:32:56:dd:49:1f:a6:5a: 7e:fa:e7:c3:e2:cc:1e:66:62:3c:35:9b:c7:b5:1b: 2b:12:0b:43:87:06:ba:df:b8:be:f7:c3:a3:04:63: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C0:B0:AE:E9:F2:F4:F7:29:92:86:E7:0C:37:05:FB:9C:49:3E:42 X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:59:ba:5e:74:e1:9d:0c:49:8e:96:c1:bc:84:ce:db:ef:6a: 43:1c:e2:fb:b6:aa:61:df:d2:78:b3:7a:2a:f9:b5:2a:05:2f: 44:6b:0e:8b:dc:18:de:7b:fb:cd:f5:f0:94:8d:b9:47:1f:84: ee:41:6f:fd:78:03:08:5b:44:86:33:15:91:c5:b2:7c:f0:bf: 2c:94:8f:c4:d8:05:bf:6a:6c:1f:30:0e:c2:25:10:65:82:36: 4d:82:a2:a6:ba:0b:fe:9d:e3:6b:fb:73:14:12:1f:dd:5d:cd: 81:34:b8:bd:f3:40:a6:69:68:fc:bf:f0:3b:2b:65:74:99:04: ea:83:6a:64:0c:21:21:e0:9f:6b:86:e4:5d:87:a2:06:52:16: 61:e5:3b:73:ad:5b:dd:fd:53:ca:2f:af:74:a0:71:c4:c6:06: 8d:37:7f:80:61:0b:00:cd:5a:0f:1c:e3:df:8e:2e:4f:57:c4: e5:98:ef:7c:36:0f:cb:13:a2:19:9a:c9:fd:a5:01:ff:24:43: 84:df:57:db:ed:ef:88:64:72:35:6d:6a:c0:fe:11:6f:49:4c: e8:b3:7b:70:ed:d1:bf:15:7a:7b:4e:0e:d5:de:f8:c1:f4:6b: e3:fa:4a:1a:f9:2b:ce:95:65:1e:45:34:d4:34:34:42:0f:f3: ad:d1:bd:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUwODIzMDAyMTExWhcNMjUwODMwMDAyMTExWjAYMRYwFAYD VQQDEw02OGE5MDk3Ny1mYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOMJ1uqll2AFz14ANeCMqMxkXa63Z9oDQ9KwCigAqtmqMDQXKzJmXPZcgXK/ 9hRtNlGTgcrfHK8BkbV5dp5DC6AqprcpyEvOZ7jySmQhUmPaeqMvMwVCxkOB9cM8 zRzC+vrcamj91NjCgUhVO6jSDExgKDQQvT1831CQMF7UeRakXTVFxB+7cueV1d+a ytY4dO14m/wW0XZO1qkQe64g4CDpCNT0kOSVeapgmrhmCYiKAnvxfQ/sVNPTeQgh MfME+QKxntlkzlwe6N9Jl/d2kDPcqPOAJlmUJTJW3Ukfplp++ufD4sweZmI8NZvH tRsrEgtDhwa637i+98OjBGMlGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPAsK7p 8vT3KZKG5ww3BfucST5CMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBWbpedOGdDEmOlsG8hM7b72pDHOL7tqph39J4s3oq+bUqBS9Eaw6L 3Bjee/vN9fCUjblHH4TuQW/9eAMIW0SGMxWRxbJ88L8slI/E2AW/amwfMA7CJRBl gjZNgqKmugv+neNr+3MUEh/dXc2BNLi980CmaWj8v/A7K2V0mQTqg2pkDCEh4J9r huRdh6IGUhZh5TtzrVvd/VPKL690oHHExgaNN3+AYQsAzVoPHOPfji5PV8TlmO98 Ng/LE6IZmsn9pQH/JEOE31fb7e+IZHI1bWrA/hFvSUzos3tw7dG/FXp7Tg7V3vjB 9Gvj+koa+SvOlWUeRTTUNDRCD/Ot0b39 -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:04 2025 by rpki-client